@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/plugin-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bootstrap.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAIrF,eAAO,MAAM,2BAA2B,GAAa,CAAC;AAEtD,gFAAgF;AAChF,MAAM,MAAM,2BAA2B,GAAG,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B,KAAK,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3C,qFAAqF;AACrF,MAAM,MAAM,+BAA+B,GAAG,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B,KAAK,OAAO,CAAC;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3E,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,6BAA6B,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE7F,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,qBAAqB,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAEvH,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,8CAA8C;IAC9C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,+BAA+B,GACxC,qBAAqB,GACrB,gBAAgB,GAChB,oBAAoB,GACpB,WAAW,GACX,kBAAkB,CAAC;AAEtB,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE1E,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,2BAA2B,CAAC;IACrD,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACrD,QAAQ,CAAC,WAAW,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAWD,0EAA0E;AAC1E,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEpH;AAwBD;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;CACrC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2FnC","sourcesContent":["/**\n * Startup plugin bootstrap orchestrator (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7). Pure injectable decision loop\n * over the frozen factory manifest: every entry is compared against the\n * locally resolved active installations and only missing plugins are handed\n * to the npm install dependency — bootstrap never acquires through any other\n * source.\n *\n * Coverage rules (G5): an existing active installation is never replaced. A\n * satisfied range is skipped silently (zero acquisition calls, G3); an\n * unsatisfied one produces a diagnostic with a manual install command and no\n * automatic replacement. Failure semantics (G4): one plugin's install\n * failure is recorded and the loop continues; the run itself never throws.\n * All effects live behind the injected dependencies, so the loop is fully\n * deterministic under mocks.\n */\n\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { selectNpmPackageVersionV1 } from \"./node-npm-registry-source.ts\";\nimport { PluginAcquisitionErrorV1 } from \"./plugin-acquisition.ts\";\n\nexport const PLUGIN_BOOTSTRAP_VERSION_V1 = 1 as const;\n\n/** Read-only local lookup of active installation versions (never networked). */\nexport type PluginBootstrapListActiveV1 = (input: {\n\treadonly signal?: AbortSignal;\n}) => Promise<ReadonlyMap<string, string>>;\n\n/** npm-only install action; resolves with the installed version and source label. */\nexport type PluginBootstrapInstallFromNpmV1 = (input: {\n\treadonly npmName: string;\n\treadonly range?: string;\n\treadonly signal?: AbortSignal;\n}) => Promise<{ readonly pluginVersion: string; readonly source: string }>;\n\nexport interface PluginBootstrapDepsV1 {\n\treadonly listActive: PluginBootstrapListActiveV1;\n\treadonly installFromNpm: PluginBootstrapInstallFromNpmV1;\n\t/** Deterministic clock for the observed duration; defaults to Date.now. */\n\treadonly now?: () => number;\n\t/** Cooperative cancellation; checked before each manifest entry. */\n\treadonly signal?: AbortSignal;\n}\n\nexport type PluginBootstrapActionStatusV1 = \"skipped\" | \"diagnosed\" | \"installed\" | \"failed\";\n\nexport type PluginBootstrapActionReasonV1 = \"satisfies_range\" | \"range_not_satisfied\" | \"installed\" | \"install_failed\";\n\n/** One per-entry outcome; the version fields carry what each status observed. */\nexport interface PluginBootstrapActionV1 {\n\treadonly pluginId: string;\n\treadonly status: PluginBootstrapActionStatusV1;\n\treadonly reason: PluginBootstrapActionReasonV1;\n\treadonly npmName: string;\n\treadonly range?: string;\n\t/** Active version that decided a skipped/diagnosed outcome. */\n\treadonly activeVersion?: string;\n\t/** Version reported by the install action. */\n\treadonly installedVersion?: string;\n\t/** npm source label reported by the install action. */\n\treadonly source?: string;\n\t/** Acquisition or install failure code for failed actions. */\n\treadonly errorCode?: string;\n}\n\nexport type PluginBootstrapDiagnosticCodeV1 =\n\t| \"range_not_satisfied\"\n\t| \"install_failed\"\n\t| \"list_active_failed\"\n\t| \"cancelled\"\n\t| \"bootstrap_failed\";\n\nexport interface PluginBootstrapDiagnosticV1 {\n\treadonly code: PluginBootstrapDiagnosticCodeV1;\n\treadonly message: string;\n\treadonly pluginId?: string;\n}\n\nexport type PluginBootstrapStatusV1 = \"succeeded\" | \"degraded\" | \"failed\";\n\nexport interface PluginBootstrapResultV1 {\n\treadonly version: typeof PLUGIN_BOOTSTRAP_VERSION_V1;\n\t/** Aggregated outcome: failed > degraded (diagnosed entries) > succeeded. */\n\treadonly status: PluginBootstrapStatusV1;\n\treadonly actions: readonly PluginBootstrapActionV1[];\n\treadonly diagnostics: readonly PluginBootstrapDiagnosticV1[];\n\treadonly durationMs: number;\n}\n\n/**\n * A version satisfies a factory range under the same selection semantics npm\n * resolution uses: it is the version that would be picked if it were the only\n * candidate. Keeps local comparison and registry resolution consistent.\n */\nfunction satisfiesRangeV1(version: string, range: string | undefined): boolean {\n\treturn selectNpmPackageVersionV1([version], range) === version;\n}\n\n/** Executable repair command for diagnostics (G4/G5 remediation hint). */\nexport function pluginBootstrapInstallCommandV1(entry: { readonly npmName: string; readonly range?: string }): string {\n\treturn `agent-forge plugin install ${entry.npmName}@${entry.range ?? \"latest\"}`;\n}\n\nfunction errorMessage(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n\nfunction acquireErrorCode(error: unknown): string {\n\treturn error instanceof PluginAcquisitionErrorV1 ? error.code : \"install_failed\";\n}\n\nfunction actionOf(\n\tentry: PluginBootstrapFactoryEntryV1,\n\tstatus: PluginBootstrapActionStatusV1,\n\treason: PluginBootstrapActionReasonV1,\n): PluginBootstrapActionV1 {\n\treturn Object.freeze({\n\t\tpluginId: entry.pluginId,\n\t\tstatus,\n\t\treason,\n\t\tnpmName: entry.npmName,\n\t\t...(entry.range === undefined ? {} : { range: entry.range }),\n\t});\n}\n\n/**\n * Run the bootstrap decision loop. An empty manifest short-circuits before\n * any dependency is touched, so the factory-empty S1-c2 state performs zero\n * reads on real startups.\n */\nexport async function runPluginBootstrapV1(input: {\n\treadonly manifest: readonly PluginBootstrapFactoryEntryV1[];\n\treadonly deps: PluginBootstrapDepsV1;\n}): Promise<PluginBootstrapResultV1> {\n\tconst now = input.deps.now ?? Date.now;\n\tconst startedAt = now();\n\tconst finish = (\n\t\tstatus: PluginBootstrapStatusV1,\n\t\tactions: readonly PluginBootstrapActionV1[],\n\t\tdiagnostics: readonly PluginBootstrapDiagnosticV1[],\n\t): PluginBootstrapResultV1 =>\n\t\tObject.freeze({\n\t\t\tversion: PLUGIN_BOOTSTRAP_VERSION_V1,\n\t\t\tstatus,\n\t\t\tactions: Object.freeze([...actions]),\n\t\t\tdiagnostics: Object.freeze([...diagnostics]),\n\t\t\tdurationMs: Math.max(0, now() - startedAt),\n\t\t});\n\tif (input.manifest.length === 0) return finish(\"succeeded\", [], []);\n\tconst signal = input.deps.signal;\n\tlet active: ReadonlyMap<string, string>;\n\ttry {\n\t\tactive = await input.deps.listActive({ ...(signal === undefined ? {} : { signal }) });\n\t} catch (error) {\n\t\treturn finish(\n\t\t\t\"failed\",\n\t\t\t[],\n\t\t\t[\n\t\t\t\t{\n\t\t\t\t\tcode: \"list_active_failed\",\n\t\t\t\t\tmessage: `Active plugin state could not be read; bootstrap installed nothing: ${errorMessage(error)}`,\n\t\t\t\t},\n\t\t\t],\n\t\t);\n\t}\n\tconst actions: PluginBootstrapActionV1[] = [];\n\tconst diagnostics: PluginBootstrapDiagnosticV1[] = [];\n\tfor (const entry of input.manifest) {\n\t\tif (signal?.aborted === true) {\n\t\t\tdiagnostics.push({\n\t\t\t\tcode: \"cancelled\",\n\t\t\t\tmessage: \"Plugin bootstrap was cancelled before all factory entries were processed\",\n\t\t\t});\n\t\t\tbreak;\n\t\t}\n\t\tconst activeVersion = active.get(entry.pluginId);\n\t\tif (activeVersion !== undefined) {\n\t\t\tif (satisfiesRangeV1(activeVersion, entry.range)) {\n\t\t\t\tactions.push(Object.freeze({ ...actionOf(entry, \"skipped\", \"satisfies_range\"), activeVersion }));\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tactions.push(Object.freeze({ ...actionOf(entry, \"diagnosed\", \"range_not_satisfied\"), activeVersion }));\n\t\t\tdiagnostics.push({\n\t\t\t\tcode: \"range_not_satisfied\",\n\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\tmessage:\n\t\t\t\t\t`Active version ${activeVersion} of ${entry.pluginId} does not satisfy the factory range ` +\n\t\t\t\t\t`${entry.range ?? \"latest\"}; bootstrap never replaces active installations. ` +\n\t\t\t\t\t`Run \\`${pluginBootstrapInstallCommandV1(entry)}\\` to install a matching version.`,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst installed = await input.deps.installFromNpm({\n\t\t\t\tnpmName: entry.npmName,\n\t\t\t\t...(entry.range === undefined ? {} : { range: entry.range }),\n\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t});\n\t\t\tactions.push(\n\t\t\t\tObject.freeze({\n\t\t\t\t\t...actionOf(entry, \"installed\", \"installed\"),\n\t\t\t\t\tinstalledVersion: installed.pluginVersion,\n\t\t\t\t\tsource: installed.source,\n\t\t\t\t}),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst errorCode = acquireErrorCode(error);\n\t\t\tactions.push(Object.freeze({ ...actionOf(entry, \"failed\", \"install_failed\"), errorCode }));\n\t\t\tdiagnostics.push({\n\t\t\t\tcode: \"install_failed\",\n\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\tmessage:\n\t\t\t\t\t`Bootstrap could not install ${entry.pluginId} from npm (${errorCode}: ${errorMessage(error)}). ` +\n\t\t\t\t\t`Startup continues without it; its capabilities stay unavailable until installed. ` +\n\t\t\t\t\t`Run \\`${pluginBootstrapInstallCommandV1(entry)}\\` to install it manually.`,\n\t\t\t});\n\t\t}\n\t}\n\tconst status: PluginBootstrapStatusV1 = actions.some((action) => action.status === \"failed\")\n\t\t? \"failed\"\n\t\t: actions.some((action) => action.status === \"diagnosed\")\n\t\t\t? \"degraded\"\n\t\t\t: \"succeeded\";\n\treturn finish(status, actions, diagnostics);\n}\n"]}

package/dist/plugins/ecosystem/plugin-bootstrap.js

@@ -0,0 +1,134 @@
+/**
+ * Startup plugin bootstrap orchestrator (design
+ * `插件独立分发与启动装配设计.md` §4.4, §0.7). Pure injectable decision loop
+ * over the frozen factory manifest: every entry is compared against the
+ * locally resolved active installations and only missing plugins are handed
+ * to the npm install dependency — bootstrap never acquires through any other
+ * source.
+ *
+ * Coverage rules (G5): an existing active installation is never replaced. A
+ * satisfied range is skipped silently (zero acquisition calls, G3); an
+ * unsatisfied one produces a diagnostic with a manual install command and no
+ * automatic replacement. Failure semantics (G4): one plugin's install
+ * failure is recorded and the loop continues; the run itself never throws.
+ * All effects live behind the injected dependencies, so the loop is fully
+ * deterministic under mocks.
+ */
+import { selectNpmPackageVersionV1 } from "./node-npm-registry-source.js";
+import { PluginAcquisitionErrorV1 } from "./plugin-acquisition.js";
+export const PLUGIN_BOOTSTRAP_VERSION_V1 = 1;
+/**
+ * A version satisfies a factory range under the same selection semantics npm
+ * resolution uses: it is the version that would be picked if it were the only
+ * candidate. Keeps local comparison and registry resolution consistent.
+ */
+function satisfiesRangeV1(version, range) {
+    return selectNpmPackageVersionV1([version], range) === version;
+}
+/** Executable repair command for diagnostics (G4/G5 remediation hint). */
+export function pluginBootstrapInstallCommandV1(entry) {
+    return `agent-forge plugin install ${entry.npmName}@${entry.range ?? "latest"}`;
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function acquireErrorCode(error) {
+    return error instanceof PluginAcquisitionErrorV1 ? error.code : "install_failed";
+}
+function actionOf(entry, status, reason) {
+    return Object.freeze({
+        pluginId: entry.pluginId,
+        status,
+        reason,
+        npmName: entry.npmName,
+        ...(entry.range === undefined ? {} : { range: entry.range }),
+    });
+}
+/**
+ * Run the bootstrap decision loop. An empty manifest short-circuits before
+ * any dependency is touched, so the factory-empty S1-c2 state performs zero
+ * reads on real startups.
+ */
+export async function runPluginBootstrapV1(input) {
+    const now = input.deps.now ?? Date.now;
+    const startedAt = now();
+    const finish = (status, actions, diagnostics) => Object.freeze({
+        version: PLUGIN_BOOTSTRAP_VERSION_V1,
+        status,
+        actions: Object.freeze([...actions]),
+        diagnostics: Object.freeze([...diagnostics]),
+        durationMs: Math.max(0, now() - startedAt),
+    });
+    if (input.manifest.length === 0)
+        return finish("succeeded", [], []);
+    const signal = input.deps.signal;
+    let active;
+    try {
+        active = await input.deps.listActive({ ...(signal === undefined ? {} : { signal }) });
+    }
+    catch (error) {
+        return finish("failed", [], [
+            {
+                code: "list_active_failed",
+                message: `Active plugin state could not be read; bootstrap installed nothing: ${errorMessage(error)}`,
+            },
+        ]);
+    }
+    const actions = [];
+    const diagnostics = [];
+    for (const entry of input.manifest) {
+        if (signal?.aborted === true) {
+            diagnostics.push({
+                code: "cancelled",
+                message: "Plugin bootstrap was cancelled before all factory entries were processed",
+            });
+            break;
+        }
+        const activeVersion = active.get(entry.pluginId);
+        if (activeVersion !== undefined) {
+            if (satisfiesRangeV1(activeVersion, entry.range)) {
+                actions.push(Object.freeze({ ...actionOf(entry, "skipped", "satisfies_range"), activeVersion }));
+                continue;
+            }
+            actions.push(Object.freeze({ ...actionOf(entry, "diagnosed", "range_not_satisfied"), activeVersion }));
+            diagnostics.push({
+                code: "range_not_satisfied",
+                pluginId: entry.pluginId,
+                message: `Active version ${activeVersion} of ${entry.pluginId} does not satisfy the factory range ` +
+                    `${entry.range ?? "latest"}; bootstrap never replaces active installations. ` +
+                    `Run \`${pluginBootstrapInstallCommandV1(entry)}\` to install a matching version.`,
+            });
+            continue;
+        }
+        try {
+            const installed = await input.deps.installFromNpm({
+                npmName: entry.npmName,
+                ...(entry.range === undefined ? {} : { range: entry.range }),
+                ...(signal === undefined ? {} : { signal }),
+            });
+            actions.push(Object.freeze({
+                ...actionOf(entry, "installed", "installed"),
+                installedVersion: installed.pluginVersion,
+                source: installed.source,
+            }));
+        }
+        catch (error) {
+            const errorCode = acquireErrorCode(error);
+            actions.push(Object.freeze({ ...actionOf(entry, "failed", "install_failed"), errorCode }));
+            diagnostics.push({
+                code: "install_failed",
+                pluginId: entry.pluginId,
+                message: `Bootstrap could not install ${entry.pluginId} from npm (${errorCode}: ${errorMessage(error)}). ` +
+                    `Startup continues without it; its capabilities stay unavailable until installed. ` +
+                    `Run \`${pluginBootstrapInstallCommandV1(entry)}\` to install it manually.`,
+            });
+        }
+    }
+    const status = actions.some((action) => action.status === "failed")
+        ? "failed"
+        : actions.some((action) => action.status === "diagnosed")
+            ? "degraded"
+            : "succeeded";
+    return finish(status, actions, diagnostics);
+}
+//# sourceMappingURL=plugin-bootstrap.js.map

package/dist/plugins/ecosystem/plugin-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-bootstrap.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/plugin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAU,CAAC;AAoEtD;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAe,EAAE,KAAyB,EAAW;IAC9E,OAAO,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,KAAK,OAAO,CAAC;AAAA,CAC/D;AAED,0EAA0E;AAC1E,MAAM,UAAU,+BAA+B,CAAC,KAA4D,EAAU;IACrH,OAAO,8BAA8B,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;AAAA,CAChF;AAED,SAAS,YAAY,CAAC,KAAc,EAAU;IAC7C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC9D;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAU;IACjD,OAAO,KAAK,YAAY,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAAA,CACjF;AAED,SAAS,QAAQ,CAChB,KAAoC,EACpC,MAAqC,EACrC,MAAqC,EACX;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM;QACN,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KAC5D,CAAC,CAAC;AAAA,CACH;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAG1C,EAAoC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACvC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,CACd,MAA+B,EAC/B,OAA2C,EAC3C,WAAmD,EACzB,EAAE,CAC5B,MAAM,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,2BAA2B;QACpC,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;KAC1C,CAAC,CAAC;IACJ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;IACjC,IAAI,MAAmC,CAAC;IACxC,IAAI,CAAC;QACJ,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,MAAM,CACZ,QAAQ,EACR,EAAE,EACF;YACC;gBACC,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,uEAAuE,YAAY,CAAC,KAAK,CAAC,EAAE;aACrG;SACD,CACD,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAkC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9B,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,0EAA0E;aACnF,CAAC,CAAC;YACH,MAAM;QACP,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;gBACjG,SAAS;YACV,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,qBAAqB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YACvG,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EACN,kBAAkB,aAAa,OAAO,KAAK,CAAC,QAAQ,sCAAsC;oBAC1F,GAAG,KAAK,CAAC,KAAK,IAAI,QAAQ,mDAAmD;oBAC7E,SAAS,+BAA+B,CAAC,KAAK,CAAC,mCAAmC;aACnF,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;gBACjD,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;aAC3C,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;gBACb,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC;gBAC5C,gBAAgB,EAAE,SAAS,CAAC,aAAa;gBACzC,MAAM,EAAE,SAAS,CAAC,MAAM;aACxB,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3F,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EACN,+BAA+B,KAAK,CAAC,QAAQ,cAAc,SAAS,KAAK,YAAY,CAAC,KAAK,CAAC,KAAK;oBACjG,mFAAmF;oBACnF,SAAS,+BAA+B,CAAC,KAAK,CAAC,4BAA4B;aAC5E,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAA4B,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC;QAC3F,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC;YACxD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,WAAW,CAAC;IAChB,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAAA,CAC5C","sourcesContent":["/**\n * Startup plugin bootstrap orchestrator (design\n * `插件独立分发与启动装配设计.md` §4.4, §0.7). Pure injectable decision loop\n * over the frozen factory manifest: every entry is compared against the\n * locally resolved active installations and only missing plugins are handed\n * to the npm install dependency — bootstrap never acquires through any other\n * source.\n *\n * Coverage rules (G5): an existing active installation is never replaced. A\n * satisfied range is skipped silently (zero acquisition calls, G3); an\n * unsatisfied one produces a diagnostic with a manual install command and no\n * automatic replacement. Failure semantics (G4): one plugin's install\n * failure is recorded and the loop continues; the run itself never throws.\n * All effects live behind the injected dependencies, so the loop is fully\n * deterministic under mocks.\n */\n\nimport type { PluginBootstrapFactoryEntryV1 } from \"./bootstrap-factory-manifest.ts\";\nimport { selectNpmPackageVersionV1 } from \"./node-npm-registry-source.ts\";\nimport { PluginAcquisitionErrorV1 } from \"./plugin-acquisition.ts\";\n\nexport const PLUGIN_BOOTSTRAP_VERSION_V1 = 1 as const;\n\n/** Read-only local lookup of active installation versions (never networked). */\nexport type PluginBootstrapListActiveV1 = (input: {\n\treadonly signal?: AbortSignal;\n}) => Promise<ReadonlyMap<string, string>>;\n\n/** npm-only install action; resolves with the installed version and source label. */\nexport type PluginBootstrapInstallFromNpmV1 = (input: {\n\treadonly npmName: string;\n\treadonly range?: string;\n\treadonly signal?: AbortSignal;\n}) => Promise<{ readonly pluginVersion: string; readonly source: string }>;\n\nexport interface PluginBootstrapDepsV1 {\n\treadonly listActive: PluginBootstrapListActiveV1;\n\treadonly installFromNpm: PluginBootstrapInstallFromNpmV1;\n\t/** Deterministic clock for the observed duration; defaults to Date.now. */\n\treadonly now?: () => number;\n\t/** Cooperative cancellation; checked before each manifest entry. */\n\treadonly signal?: AbortSignal;\n}\n\nexport type PluginBootstrapActionStatusV1 = \"skipped\" | \"diagnosed\" | \"installed\" | \"failed\";\n\nexport type PluginBootstrapActionReasonV1 = \"satisfies_range\" | \"range_not_satisfied\" | \"installed\" | \"install_failed\";\n\n/** One per-entry outcome; the version fields carry what each status observed. */\nexport interface PluginBootstrapActionV1 {\n\treadonly pluginId: string;\n\treadonly status: PluginBootstrapActionStatusV1;\n\treadonly reason: PluginBootstrapActionReasonV1;\n\treadonly npmName: string;\n\treadonly range?: string;\n\t/** Active version that decided a skipped/diagnosed outcome. */\n\treadonly activeVersion?: string;\n\t/** Version reported by the install action. */\n\treadonly installedVersion?: string;\n\t/** npm source label reported by the install action. */\n\treadonly source?: string;\n\t/** Acquisition or install failure code for failed actions. */\n\treadonly errorCode?: string;\n}\n\nexport type PluginBootstrapDiagnosticCodeV1 =\n\t| \"range_not_satisfied\"\n\t| \"install_failed\"\n\t| \"list_active_failed\"\n\t| \"cancelled\"\n\t| \"bootstrap_failed\";\n\nexport interface PluginBootstrapDiagnosticV1 {\n\treadonly code: PluginBootstrapDiagnosticCodeV1;\n\treadonly message: string;\n\treadonly pluginId?: string;\n}\n\nexport type PluginBootstrapStatusV1 = \"succeeded\" | \"degraded\" | \"failed\";\n\nexport interface PluginBootstrapResultV1 {\n\treadonly version: typeof PLUGIN_BOOTSTRAP_VERSION_V1;\n\t/** Aggregated outcome: failed > degraded (diagnosed entries) > succeeded. */\n\treadonly status: PluginBootstrapStatusV1;\n\treadonly actions: readonly PluginBootstrapActionV1[];\n\treadonly diagnostics: readonly PluginBootstrapDiagnosticV1[];\n\treadonly durationMs: number;\n}\n\n/**\n * A version satisfies a factory range under the same selection semantics npm\n * resolution uses: it is the version that would be picked if it were the only\n * candidate. Keeps local comparison and registry resolution consistent.\n */\nfunction satisfiesRangeV1(version: string, range: string | undefined): boolean {\n\treturn selectNpmPackageVersionV1([version], range) === version;\n}\n\n/** Executable repair command for diagnostics (G4/G5 remediation hint). */\nexport function pluginBootstrapInstallCommandV1(entry: { readonly npmName: string; readonly range?: string }): string {\n\treturn `agent-forge plugin install ${entry.npmName}@${entry.range ?? \"latest\"}`;\n}\n\nfunction errorMessage(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n\nfunction acquireErrorCode(error: unknown): string {\n\treturn error instanceof PluginAcquisitionErrorV1 ? error.code : \"install_failed\";\n}\n\nfunction actionOf(\n\tentry: PluginBootstrapFactoryEntryV1,\n\tstatus: PluginBootstrapActionStatusV1,\n\treason: PluginBootstrapActionReasonV1,\n): PluginBootstrapActionV1 {\n\treturn Object.freeze({\n\t\tpluginId: entry.pluginId,\n\t\tstatus,\n\t\treason,\n\t\tnpmName: entry.npmName,\n\t\t...(entry.range === undefined ? {} : { range: entry.range }),\n\t});\n}\n\n/**\n * Run the bootstrap decision loop. An empty manifest short-circuits before\n * any dependency is touched, so the factory-empty S1-c2 state performs zero\n * reads on real startups.\n */\nexport async function runPluginBootstrapV1(input: {\n\treadonly manifest: readonly PluginBootstrapFactoryEntryV1[];\n\treadonly deps: PluginBootstrapDepsV1;\n}): Promise<PluginBootstrapResultV1> {\n\tconst now = input.deps.now ?? Date.now;\n\tconst startedAt = now();\n\tconst finish = (\n\t\tstatus: PluginBootstrapStatusV1,\n\t\tactions: readonly PluginBootstrapActionV1[],\n\t\tdiagnostics: readonly PluginBootstrapDiagnosticV1[],\n\t): PluginBootstrapResultV1 =>\n\t\tObject.freeze({\n\t\t\tversion: PLUGIN_BOOTSTRAP_VERSION_V1,\n\t\t\tstatus,\n\t\t\tactions: Object.freeze([...actions]),\n\t\t\tdiagnostics: Object.freeze([...diagnostics]),\n\t\t\tdurationMs: Math.max(0, now() - startedAt),\n\t\t});\n\tif (input.manifest.length === 0) return finish(\"succeeded\", [], []);\n\tconst signal = input.deps.signal;\n\tlet active: ReadonlyMap<string, string>;\n\ttry {\n\t\tactive = await input.deps.listActive({ ...(signal === undefined ? {} : { signal }) });\n\t} catch (error) {\n\t\treturn finish(\n\t\t\t\"failed\",\n\t\t\t[],\n\t\t\t[\n\t\t\t\t{\n\t\t\t\t\tcode: \"list_active_failed\",\n\t\t\t\t\tmessage: `Active plugin state could not be read; bootstrap installed nothing: ${errorMessage(error)}`,\n\t\t\t\t},\n\t\t\t],\n\t\t);\n\t}\n\tconst actions: PluginBootstrapActionV1[] = [];\n\tconst diagnostics: PluginBootstrapDiagnosticV1[] = [];\n\tfor (const entry of input.manifest) {\n\t\tif (signal?.aborted === true) {\n\t\t\tdiagnostics.push({\n\t\t\t\tcode: \"cancelled\",\n\t\t\t\tmessage: \"Plugin bootstrap was cancelled before all factory entries were processed\",\n\t\t\t});\n\t\t\tbreak;\n\t\t}\n\t\tconst activeVersion = active.get(entry.pluginId);\n\t\tif (activeVersion !== undefined) {\n\t\t\tif (satisfiesRangeV1(activeVersion, entry.range)) {\n\t\t\t\tactions.push(Object.freeze({ ...actionOf(entry, \"skipped\", \"satisfies_range\"), activeVersion }));\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tactions.push(Object.freeze({ ...actionOf(entry, \"diagnosed\", \"range_not_satisfied\"), activeVersion }));\n\t\t\tdiagnostics.push({\n\t\t\t\tcode: \"range_not_satisfied\",\n\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\tmessage:\n\t\t\t\t\t`Active version ${activeVersion} of ${entry.pluginId} does not satisfy the factory range ` +\n\t\t\t\t\t`${entry.range ?? \"latest\"}; bootstrap never replaces active installations. ` +\n\t\t\t\t\t`Run \\`${pluginBootstrapInstallCommandV1(entry)}\\` to install a matching version.`,\n\t\t\t});\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst installed = await input.deps.installFromNpm({\n\t\t\t\tnpmName: entry.npmName,\n\t\t\t\t...(entry.range === undefined ? {} : { range: entry.range }),\n\t\t\t\t...(signal === undefined ? {} : { signal }),\n\t\t\t});\n\t\t\tactions.push(\n\t\t\t\tObject.freeze({\n\t\t\t\t\t...actionOf(entry, \"installed\", \"installed\"),\n\t\t\t\t\tinstalledVersion: installed.pluginVersion,\n\t\t\t\t\tsource: installed.source,\n\t\t\t\t}),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconst errorCode = acquireErrorCode(error);\n\t\t\tactions.push(Object.freeze({ ...actionOf(entry, \"failed\", \"install_failed\"), errorCode }));\n\t\t\tdiagnostics.push({\n\t\t\t\tcode: \"install_failed\",\n\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\tmessage:\n\t\t\t\t\t`Bootstrap could not install ${entry.pluginId} from npm (${errorCode}: ${errorMessage(error)}). ` +\n\t\t\t\t\t`Startup continues without it; its capabilities stay unavailable until installed. ` +\n\t\t\t\t\t`Run \\`${pluginBootstrapInstallCommandV1(entry)}\\` to install it manually.`,\n\t\t\t});\n\t\t}\n\t}\n\tconst status: PluginBootstrapStatusV1 = actions.some((action) => action.status === \"failed\")\n\t\t? \"failed\"\n\t\t: actions.some((action) => action.status === \"diagnosed\")\n\t\t\t? \"degraded\"\n\t\t\t: \"succeeded\";\n\treturn finish(status, actions, diagnostics);\n}\n"]}

package/dist/plugins/ecosystem/registry-cli-adapter.d.ts

@@ -0,0 +1,8 @@
+import type { PluginEcosystemRegistryV1 } from "./cli.ts";
+import { type PluginRegistryV1 } from "./registry.ts";
+/**
+ * Adapt a verified registry to the CLI's host-injected package resolver.
+ * The adapter forwards only bounded manifest metadata and never package bytes.
+ */
+export declare function createPluginEcosystemRegistryAdapterV1(registry: PluginRegistryV1): PluginEcosystemRegistryV1;
+//# sourceMappingURL=registry-cli-adapter.d.ts.map

package/dist/plugins/ecosystem/registry-cli-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-cli-adapter.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry-cli-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7E;;;GAGG;AACH,wBAAgB,sCAAsC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,yBAAyB,CAS5G","sourcesContent":["import type { PluginEcosystemRegistryV1 } from \"./cli.ts\";\nimport { PluginRegistryErrorV1, type PluginRegistryV1 } from \"./registry.ts\";\n\n/**\n * Adapt a verified registry to the CLI's host-injected package resolver.\n * The adapter forwards only bounded manifest metadata and never package bytes.\n */\nexport function createPluginEcosystemRegistryAdapterV1(registry: PluginRegistryV1): PluginEcosystemRegistryV1 {\n\tif (registry.resolve === undefined)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Registry does not expose a host-side package resolver\");\n\tconst resolve = registry.resolve;\n\tconst list = registry.listManifests;\n\treturn {\n\t\t...(list === undefined ? {} : { list }),\n\t\tresolve,\n\t};\n}\n"]}

package/dist/plugins/ecosystem/registry-cli-adapter.js

@@ -0,0 +1,16 @@
+import { PluginRegistryErrorV1 } from "./registry.js";
+/**
+ * Adapt a verified registry to the CLI's host-injected package resolver.
+ * The adapter forwards only bounded manifest metadata and never package bytes.
+ */
+export function createPluginEcosystemRegistryAdapterV1(registry) {
+    if (registry.resolve === undefined)
+        throw new PluginRegistryErrorV1("invalid_source", "Registry does not expose a host-side package resolver");
+    const resolve = registry.resolve;
+    const list = registry.listManifests;
+    return {
+        ...(list === undefined ? {} : { list }),
+        resolve,
+    };
+}
+//# sourceMappingURL=registry-cli-adapter.js.map

package/dist/plugins/ecosystem/registry-cli-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-cli-adapter.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry-cli-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAC;AAE7E;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CAAC,QAA0B,EAA6B;IAC7G,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;QACjC,MAAM,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;IACpC,OAAO;QACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,OAAO;KACP,CAAC;AAAA,CACF","sourcesContent":["import type { PluginEcosystemRegistryV1 } from \"./cli.ts\";\nimport { PluginRegistryErrorV1, type PluginRegistryV1 } from \"./registry.ts\";\n\n/**\n * Adapt a verified registry to the CLI's host-injected package resolver.\n * The adapter forwards only bounded manifest metadata and never package bytes.\n */\nexport function createPluginEcosystemRegistryAdapterV1(registry: PluginRegistryV1): PluginEcosystemRegistryV1 {\n\tif (registry.resolve === undefined)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Registry does not expose a host-side package resolver\");\n\tconst resolve = registry.resolve;\n\tconst list = registry.listManifests;\n\treturn {\n\t\t...(list === undefined ? {} : { list }),\n\t\tresolve,\n\t};\n}\n"]}

package/dist/plugins/ecosystem/registry.d.ts

@@ -0,0 +1,121 @@
+import { type PluginCatalogSnapshotV1 } from "./catalog.ts";
+import type { PluginDistributionDescriptorV1 } from "./distribution.ts";
+import type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from "./types.ts";
+/** Maximum manifest JSON bytes accepted by the registry boundary. */
+export declare const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1: number;
+/** Maximum number of manifests returned by one source query. */
+export declare const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;
+/** Maximum aggregate manifest metadata returned by one source query. */
+export declare const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1: number;
+/** Maximum source URI length; sources are identifiers, never package paths. */
+export declare const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;
+/** Maximum digest/signature text length accepted from a source. */
+export declare const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;
+export interface PluginRegistryManifestEnvelopeV1 {
+    readonly manifest: PluginManifestV1;
+    readonly source: string;
+    readonly manifestDigest: string;
+    /** Optional host- or registry-supplied signature. The verifier owns semantics. */
+    readonly signature?: string;
+    /** Optional signed artifact descriptor bound to this exact manifest identity. */
+    readonly distribution?: PluginDistributionDescriptorV1;
+}
+/**
+ * A transport-neutral registry source. Hosts inject HTTP, filesystem, or
+ * package-manager implementations. The registry never receives package bytes
+ * and never exposes source response bodies to the model context.
+ */
+export interface PluginRegistrySourceV1 {
+    /** Optional stable source identity shown in diagnostics; never a local path. */
+    readonly source?: string;
+    readonly list: (input: {
+        readonly signal?: AbortSignal;
+    }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;
+}
+export interface PluginRegistryDigestVerifierV1 {
+    readonly verify: (input: {
+        readonly manifest: PluginManifestV1;
+        readonly source: string;
+        readonly manifestDigest: string;
+        readonly expectedDigest?: string;
+        readonly signature?: string;
+    }) => {
+        readonly status: "accepted";
+    } | {
+        readonly status: "rejected";
+        readonly reason?: string;
+    } | Promise<{
+        readonly status: "accepted";
+    } | {
+        readonly status: "rejected";
+        readonly reason?: string;
+    }>;
+}
+export interface PluginRegistryOptionsV1 {
+    readonly source: PluginRegistrySourceV1;
+    readonly host: HostFactsV1;
+    /** Required digest/signature verifier. No implicit trust fallback. */
+    readonly verify: PluginRegistryDigestVerifierV1;
+    /** Existing source verifier contract is mandatory at the registry boundary. */
+    readonly sourceVerifier: PluginSourceVerifierV1;
+    readonly availableCapabilities?: readonly CapabilityRefV1[];
+    readonly maxManifests?: number;
+}
+export type PluginRegistryErrorCodeV1 = "cancelled" | "invalid_limit" | "source_rejected" | "invalid_manifest" | "invalid_source" | "invalid_digest" | "payload_too_large" | "too_many_manifests" | "incompatible";
+export declare class PluginRegistryErrorV1 extends Error {
+    readonly code: PluginRegistryErrorCodeV1;
+    readonly cause?: unknown;
+    constructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown);
+}
+export interface PluginRegistryEntryV1 {
+    readonly pluginId: string;
+    readonly pluginVersion: string;
+    readonly source: string;
+    readonly manifestDigest: string;
+    readonly signed: boolean;
+}
+export type PluginRegistryRejectionCodeV1 = "source_rejected" | "digest_rejected" | "incompatible";
+export interface PluginRegistryRejectionV1 {
+    readonly pluginId: string;
+    readonly pluginVersion: string;
+    readonly code: PluginRegistryRejectionCodeV1;
+    readonly reason: string;
+}
+export interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {
+    readonly resolutionStatus: "installed-ready";
+}
+export interface PluginRegistrySnapshotV1 {
+    readonly version: 1;
+    readonly source: string;
+    readonly entries: readonly PluginRegistryEntryV1[];
+    readonly catalog: PluginCatalogSnapshotV1;
+    /** Only entries that passed proof validation and host compatibility. */
+    readonly verified: readonly PluginRegistryVerifiedEntryV1[];
+    /** Platform/API/test-only entries remain visible in catalog but are not verified. */
+    readonly rejected: readonly PluginRegistryRejectionV1[];
+}
+/** Host-side package projection; package bytes never cross this boundary. */
+export interface PluginRegistryResolvedPackageV1 {
+    readonly manifest: PluginManifestV1;
+    readonly source: string;
+    readonly expectedDigest: string;
+    readonly distribution?: PluginDistributionDescriptorV1;
+}
+export interface PluginRegistryV1 {
+    readonly list: (input?: {
+        readonly signal?: AbortSignal;
+    }) => Promise<PluginRegistrySnapshotV1>;
+    /** Optional host-side resolver. Older custom registry implementations may omit it. */
+    readonly resolve?: (input: {
+        readonly pluginId: string;
+        readonly pluginVersion?: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<PluginRegistryResolvedPackageV1 | undefined>;
+    /** Optional host-side manifest projection used by the CLI catalog command. */
+    readonly listManifests?: (input?: {
+        readonly signal?: AbortSignal;
+    }) => Promise<readonly PluginManifestV1[]>;
+}
+/** Create a deterministic, host-injected registry client. */
+export declare function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1;
+//# sourceMappingURL=registry.d.ts.map

package/dist/plugins/ecosystem/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,KAAK,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC3G,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAExE,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGzG,qEAAqE;AACrE,eAAO,MAAM,qCAAqC,QAAY,CAAC;AAC/D,gEAAgE;AAChE,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,wEAAwE;AACxE,eAAO,MAAM,oCAAoC,QAAkB,CAAC;AACpE,+EAA+E;AAC/E,eAAO,MAAM,mCAAmC,OAAO,CAAC;AACxD,mEAAmE;AACnE,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,kFAAkF;IAClF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,SAAS,gCAAgC,EAAE,CAAC,CAAC;CAClH;AAED,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;QACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC5B,KACE;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAC/B;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACzD,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxG;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,yBAAyB,GAClC,WAAW,GACX,eAAe,GACf,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,CAAC;AAElB,qBAAa,qBAAsB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB,YAAY,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAK5E;CACD;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,MAAM,6BAA6B,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAC;AAEnG,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,6BAA8B,SAAQ,qBAAqB;IAC3E,QAAQ,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CAC7C;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC/C,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAChG,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,KAAK,OAAO,CAAC,+BAA+B,GAAG,SAAS,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;CAC7G;AA4LD,6DAA6D;AAC7D,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAsLzF","sourcesContent":["import { buildPluginCatalogV1, comparePluginVersionsV1, type PluginCatalogSnapshotV1 } from \"./catalog.ts\";\nimport type { PluginDistributionDescriptorV1 } from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport type { CapabilityRefV1, HostFactsV1, PluginManifestV1, PluginSourceVerifierV1 } from \"./types.ts\";\nimport { pluginManifestDigestV1 } from \"./updates.ts\";\n\n/** Maximum manifest JSON bytes accepted by the registry boundary. */\nexport const MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1 = 64 * 1024;\n/** Maximum number of manifests returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_MANIFESTS_V1 = 256;\n/** Maximum aggregate manifest metadata returned by one source query. */\nexport const MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1 = 4 * 1024 * 1024;\n/** Maximum source URI length; sources are identifiers, never package paths. */\nexport const MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1 = 2048;\n/** Maximum digest/signature text length accepted from a source. */\nexport const MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1 = 512;\n\nexport interface PluginRegistryManifestEnvelopeV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\t/** Optional host- or registry-supplied signature. The verifier owns semantics. */\n\treadonly signature?: string;\n\t/** Optional signed artifact descriptor bound to this exact manifest identity. */\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\n/**\n * A transport-neutral registry source. Hosts inject HTTP, filesystem, or\n * package-manager implementations. The registry never receives package bytes\n * and never exposes source response bodies to the model context.\n */\nexport interface PluginRegistrySourceV1 {\n\t/** Optional stable source identity shown in diagnostics; never a local path. */\n\treadonly source?: string;\n\treadonly list: (input: { readonly signal?: AbortSignal }) => Promise<readonly PluginRegistryManifestEnvelopeV1[]>;\n}\n\nexport interface PluginRegistryDigestVerifierV1 {\n\treadonly verify: (input: {\n\t\treadonly manifest: PluginManifestV1;\n\t\treadonly source: string;\n\t\treadonly manifestDigest: string;\n\t\treadonly expectedDigest?: string;\n\t\treadonly signature?: string;\n\t}) =>\n\t\t| { readonly status: \"accepted\" }\n\t\t| { readonly status: \"rejected\"; readonly reason?: string }\n\t\t| Promise<{ readonly status: \"accepted\" } | { readonly status: \"rejected\"; readonly reason?: string }>;\n}\n\nexport interface PluginRegistryOptionsV1 {\n\treadonly source: PluginRegistrySourceV1;\n\treadonly host: HostFactsV1;\n\t/** Required digest/signature verifier. No implicit trust fallback. */\n\treadonly verify: PluginRegistryDigestVerifierV1;\n\t/** Existing source verifier contract is mandatory at the registry boundary. */\n\treadonly sourceVerifier: PluginSourceVerifierV1;\n\treadonly availableCapabilities?: readonly CapabilityRefV1[];\n\treadonly maxManifests?: number;\n}\n\nexport type PluginRegistryErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_limit\"\n\t| \"source_rejected\"\n\t| \"invalid_manifest\"\n\t| \"invalid_source\"\n\t| \"invalid_digest\"\n\t| \"payload_too_large\"\n\t| \"too_many_manifests\"\n\t| \"incompatible\";\n\nexport class PluginRegistryErrorV1 extends Error {\n\treadonly code: PluginRegistryErrorCodeV1;\n\treadonly cause?: unknown;\n\n\tconstructor(code: PluginRegistryErrorCodeV1, message: string, cause?: unknown) {\n\t\tsuper(message, cause === undefined ? undefined : { cause });\n\t\tthis.name = \"PluginRegistryErrorV1\";\n\t\tthis.code = code;\n\t\tthis.cause = cause;\n\t}\n}\n\nexport interface PluginRegistryEntryV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly source: string;\n\treadonly manifestDigest: string;\n\treadonly signed: boolean;\n}\n\nexport type PluginRegistryRejectionCodeV1 = \"source_rejected\" | \"digest_rejected\" | \"incompatible\";\n\nexport interface PluginRegistryRejectionV1 {\n\treadonly pluginId: string;\n\treadonly pluginVersion: string;\n\treadonly code: PluginRegistryRejectionCodeV1;\n\treadonly reason: string;\n}\n\nexport interface PluginRegistryVerifiedEntryV1 extends PluginRegistryEntryV1 {\n\treadonly resolutionStatus: \"installed-ready\";\n}\n\nexport interface PluginRegistrySnapshotV1 {\n\treadonly version: 1;\n\treadonly source: string;\n\treadonly entries: readonly PluginRegistryEntryV1[];\n\treadonly catalog: PluginCatalogSnapshotV1;\n\t/** Only entries that passed proof validation and host compatibility. */\n\treadonly verified: readonly PluginRegistryVerifiedEntryV1[];\n\t/** Platform/API/test-only entries remain visible in catalog but are not verified. */\n\treadonly rejected: readonly PluginRegistryRejectionV1[];\n}\n\n/** Host-side package projection; package bytes never cross this boundary. */\nexport interface PluginRegistryResolvedPackageV1 {\n\treadonly manifest: PluginManifestV1;\n\treadonly source: string;\n\treadonly expectedDigest: string;\n\treadonly distribution?: PluginDistributionDescriptorV1;\n}\n\nexport interface PluginRegistryV1 {\n\treadonly list: (input?: { readonly signal?: AbortSignal }) => Promise<PluginRegistrySnapshotV1>;\n\t/** Optional host-side resolver. Older custom registry implementations may omit it. */\n\treadonly resolve?: (input: {\n\t\treadonly pluginId: string;\n\t\treadonly pluginVersion?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<PluginRegistryResolvedPackageV1 | undefined>;\n\t/** Optional host-side manifest projection used by the CLI catalog command. */\n\treadonly listManifests?: (input?: { readonly signal?: AbortSignal }) => Promise<readonly PluginManifestV1[]>;\n}\n\nfunction isAbortLike(error: unknown, signal: AbortSignal | undefined): boolean {\n\treturn (\n\t\tsignal?.aborted === true ||\n\t\t(error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\"))\n\t);\n}\n\nfunction boundedString(\n\tvalue: unknown,\n\tlabel: string,\n\tmax: number,\n\tcode: PluginRegistryErrorCodeV1 = \"invalid_source\",\n): string {\n\tif (typeof value !== \"string\" || value.trim() === \"\" || value.length > max || /[\\u0000-\\u001f]/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(code, `${label} must be a non-empty bounded string`);\n\t}\n\treturn value;\n}\n\nfunction assertAllowedKeys(value: Record<string, unknown>, allowed: readonly string[], label: string): void {\n\tconst expected = new Set(allowed);\n\tif (Object.keys(value).some((key) => !expected.has(key)))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `${label} contains an unsupported field`);\n}\n\nfunction validateSource(source: unknown): string {\n\tconst value = boundedString(source, \"source\", MAX_PLUGIN_REGISTRY_SOURCE_CHARS_V1);\n\tif (/^(?:file:|[a-zA-Z]:[\\\\/]|[\\\\/]{1,2}|\\\\\\\\)/iu.test(value) || /\\s/u.test(value)) {\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_source\",\n\t\t\t\"Plugin registry source must be an opaque URI, not a local path\",\n\t\t);\n\t}\n\tif (/^https?:\\/\\//iu.test(value)) {\n\t\ttry {\n\t\t\tconst parsed = new URL(value);\n\t\t\tconst pathname = parsed.pathname.length > 512 ? `${parsed.pathname.slice(0, 511)}…` : parsed.pathname;\n\t\t\treturn `${parsed.origin}${pathname || \"/\"}`;\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Plugin registry source URL is invalid\", error);\n\t\t}\n\t}\n\treturn value;\n}\n\nfunction validateManifest(manifest: unknown): PluginManifestV1 {\n\tif (typeof manifest !== \"object\" || manifest === null || Array.isArray(manifest)) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest must be an object\");\n\t}\n\tconst value = manifest as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tvalue,\n\t\t[\n\t\t\t\"id\",\n\t\t\t\"pluginVersion\",\n\t\t\t\"apiVersion\",\n\t\t\t\"minHostVersion\",\n\t\t\t\"maxHostVersion\",\n\t\t\t\"capabilityRefs\",\n\t\t\t\"requires\",\n\t\t\t\"platform\",\n\t\t\t\"testOnly\",\n\t\t],\n\t\t\"Registry manifest\",\n\t);\n\tif (typeof value.id !== \"string\" || value.id.trim() === \"\" || value.id.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest id is invalid\");\n\tif (typeof value.pluginVersion !== \"string\" || value.pluginVersion.trim() === \"\" || value.pluginVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest pluginVersion is invalid\");\n\tif (typeof value.apiVersion !== \"string\" || value.apiVersion.trim() === \"\" || value.apiVersion.length > 256)\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest apiVersion is invalid\");\n\tif (value.minHostVersion === undefined && value.maxHostVersion === undefined)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_manifest\",\n\t\t\t\"Published plugins must declare host version compatibility range: set minHostVersion and/or maxHostVersion\",\n\t\t);\n\tlet bytes: number;\n\ttry {\n\t\tbytes = new TextEncoder().encode(JSON.stringify(manifest)).byteLength;\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry manifest cannot be serialized\", error);\n\t}\n\tif (bytes > MAX_PLUGIN_REGISTRY_MANIFEST_BYTES_V1)\n\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry manifest exceeds the size limit\");\n\treturn Object.freeze({ ...value } as unknown as PluginManifestV1);\n}\n\nfunction validateEnvelope(value: unknown): PluginRegistryManifestEnvelopeV1 {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry response entry must be an object\");\n\tconst entry = value as Record<string, unknown>;\n\tassertAllowedKeys(\n\t\tentry,\n\t\t[\"manifest\", \"source\", \"manifestDigest\", \"signature\", \"distribution\"],\n\t\t\"Registry response entry\",\n\t);\n\tconst manifest = validateManifest(entry.manifest);\n\tconst source = validateSource(entry.source);\n\tconst manifestDigest = boundedString(entry.manifestDigest, \"manifestDigest\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tif (entry.signature !== undefined) boundedString(entry.signature, \"signature\", MAX_PLUGIN_REGISTRY_PROOF_CHARS_V1);\n\tlet distribution: PluginDistributionDescriptorV1 | undefined;\n\tif (entry.distribution !== undefined) {\n\t\ttry {\n\t\t\tdistribution = createPluginDistributionV1().validateDescriptor(entry.distribution);\n\t\t} catch (error) {\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry distribution descriptor is invalid\", error);\n\t\t}\n\t\tif (\n\t\t\tdistribution.pluginId !== manifest.id ||\n\t\t\tdistribution.pluginVersion !== manifest.pluginVersion ||\n\t\t\tdistribution.manifestDigest !== manifestDigest\n\t\t)\n\t\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\t\"invalid_manifest\",\n\t\t\t\t\"Registry distribution descriptor does not match the manifest identity\",\n\t\t\t);\n\t}\n\treturn Object.freeze({\n\t\tmanifest,\n\t\tsource,\n\t\tmanifestDigest,\n\t\t...(entry.signature === undefined ? {} : { signature: entry.signature as string }),\n\t\t...(distribution === undefined ? {} : { distribution }),\n\t});\n}\n\nfunction validateMax(value: number | undefined): number {\n\tconst max = value ?? MAX_PLUGIN_REGISTRY_MANIFESTS_V1;\n\tif (!Number.isSafeInteger(max) || max < 1 || max > MAX_PLUGIN_REGISTRY_MANIFESTS_V1)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_limit\",\n\t\t\t`maxManifests must be an integer between 1 and ${MAX_PLUGIN_REGISTRY_MANIFESTS_V1}`,\n\t\t);\n\treturn max;\n}\n\nasync function validateSourceProof(\n\tentry: PluginRegistryManifestEnvelopeV1,\n\tverifier: PluginRegistryDigestVerifierV1,\n\tsourceVerifier: PluginSourceVerifierV1,\n): Promise<void> {\n\tconst actualDigest = pluginManifestDigestV1(entry.manifest);\n\tif (entry.manifestDigest !== actualDigest)\n\t\tthrow new PluginRegistryErrorV1(\n\t\t\t\"invalid_digest\",\n\t\t\t`Manifest digest mismatch for ${entry.manifest.id}@${entry.manifest.pluginVersion}`,\n\t\t);\n\ttry {\n\t\tconst result = await verifier.verify({\n\t\t\tmanifest: entry.manifest,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\tsignature: entry.signature,\n\t\t});\n\t\tif (result.status !== \"accepted\")\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Registry source proof was rejected\");\n\t} catch (error) {\n\t\tif (error instanceof PluginRegistryErrorV1) throw error;\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source proof was rejected\", error);\n\t}\n\tlet result: ReturnType<PluginSourceVerifierV1>;\n\ttry {\n\t\tresult = sourceVerifier({\n\t\t\tpluginId: entry.manifest.id,\n\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\tsource: entry.source,\n\t\t\tmanifestDigest: actualDigest,\n\t\t});\n\t} catch (error) {\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin source verifier failed\", error);\n\t}\n\tif (result.status !== \"accepted\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", result.reason ?? \"Plugin source was rejected\");\n}\n\nfunction sourceIdentity(entries: readonly PluginRegistryManifestEnvelopeV1[]): string {\n\tconst sources = [...new Set(entries.map((entry) => entry.source))].sort((left, right) => left.localeCompare(right));\n\treturn sources.join(\",\");\n}\n\ninterface RegistryLoadV1 {\n\treadonly accepted: readonly PluginRegistryManifestEnvelopeV1[];\n\treadonly snapshot: PluginRegistrySnapshotV1;\n}\n\n/** Create a deterministic, host-injected registry client. */\nexport function createPluginRegistryV1(options: PluginRegistryOptionsV1): PluginRegistryV1 {\n\tconst maxManifests = validateMax(options.maxManifests);\n\tif (options.source === undefined || typeof options.source.list !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"invalid_source\", \"Registry source must provide list()\");\n\tif (options.source.source !== undefined) validateSource(options.source.source);\n\tif (options.verify === undefined || typeof options.verify.verify !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source/digest verifier is required\");\n\tif (options.sourceVerifier === undefined || typeof options.sourceVerifier !== \"function\")\n\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Registry source verifier is required\");\n\n\tconst load = async (input: { readonly signal?: AbortSignal } = {}): Promise<RegistryLoadV1> => {\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tlet raw: readonly PluginRegistryManifestEnvelopeV1[];\n\t\ttry {\n\t\t\traw = await options.source.list({ signal: input.signal });\n\t\t} catch (error) {\n\t\t\tif (isAbortLike(error, input.signal))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\", error);\n\t\t\tthrow new PluginRegistryErrorV1(\"source_rejected\", \"Plugin registry source failed\", error);\n\t\t}\n\t\tif (input.signal?.aborted)\n\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\tif (!Array.isArray(raw))\n\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", \"Registry source must return an array\");\n\t\tif (raw.length > maxManifests)\n\t\t\tthrow new PluginRegistryErrorV1(\"too_many_manifests\", \"Registry response contains too many manifests\");\n\t\tconst entries = raw.map(validateEnvelope);\n\t\tconst payloadBytes = entries.reduce((total, entry) => {\n\t\t\tconst manifestBytes = new TextEncoder().encode(JSON.stringify(entry.manifest)).byteLength;\n\t\t\tconst distributionBytes =\n\t\t\t\tentry.distribution === undefined\n\t\t\t\t\t? 0\n\t\t\t\t\t: new TextEncoder().encode(JSON.stringify(entry.distribution)).byteLength;\n\t\t\treturn (\n\t\t\t\ttotal +\n\t\t\t\tmanifestBytes +\n\t\t\t\tdistributionBytes +\n\t\t\t\tnew TextEncoder().encode(entry.source).byteLength +\n\t\t\t\tnew TextEncoder().encode(entry.manifestDigest).byteLength +\n\t\t\t\t(entry.signature === undefined ? 0 : new TextEncoder().encode(entry.signature).byteLength)\n\t\t\t);\n\t\t}, 0);\n\t\tif (payloadBytes > MAX_PLUGIN_REGISTRY_PAYLOAD_BYTES_V1)\n\t\t\tthrow new PluginRegistryErrorV1(\"payload_too_large\", \"Registry response exceeds the aggregate size limit\");\n\t\tconst seen = new Set<string>();\n\t\tconst accepted: PluginRegistryManifestEnvelopeV1[] = [];\n\t\tconst rejected: PluginRegistryRejectionV1[] = [];\n\t\tfor (const entry of entries) {\n\t\t\tconst identity = `${entry.manifest.id}@${entry.manifest.pluginVersion}`;\n\t\t\tif (seen.has(identity))\n\t\t\t\tthrow new PluginRegistryErrorV1(\"invalid_manifest\", `Duplicate registry manifest: ${identity}`);\n\t\t\tseen.add(identity);\n\t\t\ttry {\n\t\t\t\tawait validateSourceProof(entry, options.verify, options.sourceVerifier);\n\t\t\t} catch (error) {\n\t\t\t\tif (!(error instanceof PluginRegistryErrorV1)) throw error;\n\t\t\t\tif (error.cause !== undefined) throw error;\n\t\t\t\tif (error.code !== \"source_rejected\" && error.code !== \"invalid_digest\") throw error;\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\tcode: error.code === \"invalid_digest\" ? \"digest_rejected\" : \"source_rejected\",\n\t\t\t\t\treason:\n\t\t\t\t\t\terror.code === \"invalid_digest\" ? \"Manifest digest mismatch\" : \"Registry source proof was rejected\",\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (input.signal?.aborted)\n\t\t\t\tthrow new PluginRegistryErrorV1(\"cancelled\", \"Plugin registry operation was cancelled\");\n\t\t\taccepted.push(entry);\n\t\t}\n\t\tconst manifests = accepted.map((entry) => entry.manifest);\n\t\tconst catalog = buildPluginCatalogV1({\n\t\t\tmanifests,\n\t\t\thost: options.host,\n\t\t\tavailableCapabilities: options.availableCapabilities,\n\t\t\tmaxEntries: maxManifests,\n\t\t});\n\t\tconst publicEntries = Object.freeze(\n\t\t\t[...accepted]\n\t\t\t\t.sort((left, right) => {\n\t\t\t\t\tconst idOrder = left.manifest.id.localeCompare(right.manifest.id);\n\t\t\t\t\treturn idOrder === 0\n\t\t\t\t\t\t? comparePluginVersionsV1(right.manifest.pluginVersion, left.manifest.pluginVersion)\n\t\t\t\t\t\t: idOrder;\n\t\t\t\t})\n\t\t\t\t.map((entry) =>\n\t\t\t\t\tObject.freeze({\n\t\t\t\t\t\tpluginId: entry.manifest.id,\n\t\t\t\t\t\tpluginVersion: entry.manifest.pluginVersion,\n\t\t\t\t\t\tsource: entry.source,\n\t\t\t\t\t\tmanifestDigest: entry.manifestDigest,\n\t\t\t\t\t\tsigned: entry.signature !== undefined,\n\t\t\t\t\t}),\n\t\t\t\t),\n\t\t);\n\t\tconst catalogByIdentity = new Map(\n\t\t\tcatalog.entries.map((entry) => [`${entry.pluginId}@${entry.pluginVersion}`, entry] as const),\n\t\t);\n\t\tconst verified = Object.freeze(\n\t\t\tpublicEntries.flatMap((entry) => {\n\t\t\t\tconst catalogEntry = catalogByIdentity.get(`${entry.pluginId}@${entry.pluginVersion}`);\n\t\t\t\tif (catalogEntry?.resolution.status === \"installed-ready\")\n\t\t\t\t\treturn [{ ...entry, resolutionStatus: \"installed-ready\" as const }];\n\t\t\t\tconst reason = catalogEntry?.resolution.diagnostics[0]?.message ?? \"Plugin is incompatible with this host\";\n\t\t\t\trejected.push({\n\t\t\t\t\tpluginId: entry.pluginId,\n\t\t\t\t\tpluginVersion: entry.pluginVersion,\n\t\t\t\t\tcode: \"incompatible\",\n\t\t\t\t\treason,\n\t\t\t\t});\n\t\t\t\treturn [];\n\t\t\t}),\n\t\t);\n\t\treturn {\n\t\t\taccepted: Object.freeze(accepted),\n\t\t\tsnapshot: Object.freeze({\n\t\t\t\tversion: 1,\n\t\t\t\tsource:\n\t\t\t\t\toptions.source.source === undefined ? sourceIdentity(accepted) : validateSource(options.source.source),\n\t\t\t\tentries: publicEntries,\n\t\t\t\tcatalog,\n\t\t\t\tverified,\n\t\t\t\trejected: Object.freeze(rejected),\n\t\t\t}),\n\t\t};\n\t};\n\tconst listManifests = async (\n\t\tinput: { readonly signal?: AbortSignal } = {},\n\t): Promise<readonly PluginManifestV1[]> => {\n\t\tconst loaded = await load(input);\n\t\treturn Object.freeze(\n\t\t\tloaded.snapshot.catalog.entries.flatMap((catalogEntry) =>\n\t\t\t\tloaded.accepted\n\t\t\t\t\t.filter(\n\t\t\t\t\t\t(entry) =>\n\t\t\t\t\t\t\tentry.manifest.id === catalogEntry.pluginId &&\n\t\t\t\t\t\t\tentry.manifest.pluginVersion === catalogEntry.pluginVersion,\n\t\t\t\t\t)\n\t\t\t\t\t.map((entry) => entry.manifest),\n\t\t\t),\n\t\t);\n\t};\n\treturn {\n\t\tlist: async (input = {}) => (await load(input)).snapshot,\n\t\tlistManifests,\n\t\tresolve: async (input) => {\n\t\t\tconst loaded = await load({ signal: input.signal });\n\t\t\tconst verified = new Set(loaded.snapshot.verified.map((entry) => `${entry.pluginId}@${entry.pluginVersion}`));\n\t\t\tconst identity =\n\t\t\t\tinput.pluginVersion === undefined\n\t\t\t\t\t? loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t)\n\t\t\t\t\t: loaded.snapshot.catalog.entries.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.pluginId === input.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.pluginVersion === input.pluginVersion &&\n\t\t\t\t\t\t\t\tcandidate.resolution.status === \"installed-ready\" &&\n\t\t\t\t\t\t\t\tverified.has(`${candidate.pluginId}@${candidate.pluginVersion}`),\n\t\t\t\t\t\t);\n\t\t\tconst entry =\n\t\t\t\tidentity === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: loaded.accepted.find(\n\t\t\t\t\t\t\t(candidate) =>\n\t\t\t\t\t\t\t\tcandidate.manifest.id === identity.pluginId &&\n\t\t\t\t\t\t\t\tcandidate.manifest.pluginVersion === identity.pluginVersion,\n\t\t\t\t\t\t);\n\t\t\tif (entry === undefined) return undefined;\n\t\t\treturn Object.freeze({\n\t\t\t\tmanifest: entry.manifest,\n\t\t\t\tsource: entry.source,\n\t\t\t\texpectedDigest: entry.manifestDigest,\n\t\t\t\t...(entry.distribution === undefined ? {} : { distribution: entry.distribution }),\n\t\t\t});\n\t\t},\n\t};\n}\n"]}